Combinational circuit, and encoder, decoder and semiconductor device using this combinational circuit

ABSTRACT

A combinational circuit comprises: a plurality of multipliers, independently performing two or more multiplications for coded digital signals in a Galois extension field GF(2 m ) (m is an integer equal to or greater than 2), wherein the multipliers include an input side XOR calculator, an AND calculator, and an output side XOR calculator, and wherein the multipliers share the input side XOR calculator. Further, according to the present invention, these multipliers each include an adder connected between an AND calculator and an output side XOR calculator, wherein the output side XOR calculator is used in common, and wherein the outputs of the AND calculators in the multipliers are added by the adders, and the addition results are calculated by the output side XOR calculator that is used in common.

BACKGROUND OF THE INVENTION

[0001] 1. Field of the Invention

[0002] The present invention relates to a combinational circuit, and an encoder, a decoder and a semiconductor device that use this combinational circuit. More specifically, the present invention relates to a combinational circuit that can effectively correct errors, especially in a fast optical communication field, and an encoder, a decoder and a semiconductor device that use this combinational circuit.

[0003] 2. Brief Description of the Prior Art

Importance of Fast and Superior Error Correction Technique

[0004] In consonance with the expansion of the Internet and the development of e-business, the rate of increase in the volume of data computers can handle and their speed has accelerated. Accordingly, there is a demand for increasing speed of data transfer among computers, and in line with this demand, optical communication that yields transfer speed of up to 40 Gbps is becoming popular. However, for such a fast communication method such as the optical communication method, to maintain an acceptable error rate at system level requires that the reliability of data communication be further increased in proportion to the amount of data processed by a computer.

[0005] Important techniques, called error correction coding techniques, have been devised to improve data reliability employing high-level mathematics to automatically correct errors caused by a variety of factors (e.g., noise along a channel). Popular known techniques are Hamming code and Reed-Solomon code, both of which are frequently employed. Basically, Hamming codes correct single bit errors, but their correction capability is low. For instance, with Hamming codes, if a single bit error is detected, the error is corrected, but if the detected error covers two bits, only the error detection portion of the process is performed, no correction is made. However, setting up an error correction process for an error correction system using Hamming code is simple, and it is well known that by performing the error correction process in parallel, a processing speed that greatly exceeds 1 Gbps (one billion bits per second) can be obtained.

[0006] On the other hand, Reed-Solomon code is a superior error correction technique possessing high correction capabilities and can be used to correct errors appearing as units (symbols) comprising multiple contiguous bits. At present, however, because of the complicated calculations that are frequently required, using Reed-Solomon code to perform correction processes in parallel is difficult; and even when pipeline processes using data having eight-bit width are performed at 100 MHz, for example, only processing speed of around 800 Mb/s can be obtained. Currently, therefore, since the speed attainable with conventional techniques using Reed-Solomon codes is not suitable for fields in which high processing speed is required, these techniques are employed mainly for fields to which comparatively low data processing speed is acceptable, such as the low speed communication field and the data storage-unit field for the production of hard disks or secondary storage devices, CD-ROMs, for example.

Error Correction Technique Required by a Fast Optical Communication Field

[0007] As part of a fast optical communication technique for data communication by computers, by the recently popular Internet as a backbone, a terabit per second fast communication system that employs WDM (Wavelength Division Multiplexing) and DWDM (Dense WDM), which has improved wavelength division multiplexing levels, has been introduced based on the SONET technique, according to which frames having a predetermined length are synchronously and sequentially transmitted.

[0008] As the wavelength division multiplexing levels for the above described optical data communication is increased, crosstalk occurs between wavelengths that are near each other. To cope with this crosstalk, FEC (Forward Error Correction) is employed as an error correction method for communication in long distance (Long Haul) optical wavelength division multiplexing. In ITU-T G.975, the ITU (International Telecommunication Union) standardized the use of interleaved (255, 239)RS code (code length n=255 bytes) of m=8 (8 bits/symbols), and in G.709, the Digital Wrapper standard for defining the FEC frame structure is employed.

[0009] According to the Digital Wrapper standard, for example, low-speed serial Reed-Solomon code circuits are arranged in parallel to achieve a necessary processing capability, and for this, interleaving of Reed-Solomon codes is an indispensable technique.

Prior Art for Fast and High-Level Error Correction Techniques

[0010] Independent of the need for optical communication, parallel fast decoding using Reed-Solomon code has been studied using a combinational circuit.

[0011]FIG. 1 is a diagram showing an example of a fast decoder that can be used for an error correction apparatus. The decoding circuit in FIG. 1 implements a procedure for increasing by a multiple of ten or more the decoding speed of one decoding circuit, and for performing, at substantially the comparable speed as that of Humming code, parallel decoding in an error correction process using the Reed-Solomon coding possessing high-level error correction capabilities. For the decoding circuit in FIG. 1, a new representation using the elementary symmetric functions is employed for decoding Reed-Solomon codes, so that an error value polynomial Er(x) of 0(t)-degree with which error values can be directly calculated is employed (t is the maximum number of correctable errors).

[0012] Since the decoding circuit in FIG. 1 employs this polynomial, not only syndrome calculation and error location evaluation, but also error value evaluation can be directly obtained by performing calculations for a single polynomial. Therefore, compared with the conventional methods whereby these calculations are performed by Forney algorithm to divide evaluation results obtained for two polynomials, a greatly simplified operation can be used. Further, in the decoding circuit in FIG. 1, a representation appropriate for a combinational circuit is employed not only for the calculation of the coefficients of Er(x), but also for the calculation of the coefficients of the error locator polynomial Λ(x), so that not only can a higher processing speed be provided, but in addition, the number of required arithmetic circuits can be reduced.

[0013] When the decoding circuit in FIG. 1 is employed, a random 4-byte error correction circuit, which is mounted on an experimental base for a semiconductor using the standard 0.35 μm ASIC technique, can process in parallel, and at a low latency (45 ns), data having a 320-bit width, and a processing speed of 7 Gb/s (7 billion bits per second) can be obtained that is nearly ten times higher than the typical processing speed of 800 Mb/s available with a current serial decoding circuit. In addition, when a new circuit optimization algorithm specifically prepared for a large parallel error correction circuit and a circuit sharing method are employed for the decoding circuit in FIG. 1, the circuit size can be reduced. And furthermore, since the decoding circuit in FIG. 1 is a combinational circuit that does not require an external controller and registers, in spite of the high processing speed that can be attained, power consumption can be reduced. However, the decoding circuit in FIG. 1 can not provide a processing speed that equals 40 Gbps required for optical communication, and in order to cope with the 8-byte error correction standard established by the ITU, when the normal circuit sharing method is used the resulting circuit can be so large that it can not be mounted on a single chip.

[0014]FIG. 2 is a schematic diagram showing the configuration of an error correction circuit that employs a conventional low-speed decoding method for optical communication. With this configuration, as the communication speed of an optical communication field increases, the conventional method whereby low-speed serial Reed-Solomon decoders are arranged in parallel becomes ever more inappropriate. Through conventional RS decoders have a processing speed below 1 Gbps, the decoding method in FIG. 2 achieves the necessary processing speed by an appropriate arrangement of low-speed serial Reed-Solomon decoders. However, according to the conventional method in FIG. 2, for such an arrangement of many Reed-Solomon decoders are required, and accordingly, the circuit size is increased in direct proportion to the data transfer speed used for optical communication. FIG. 3 is a graph showing circuit size and data transfer speed plotted when the decoding method in FIG. 2 is employed.

[0015]FIG. 4 is a diagram showing another conventional decoding circuit (A. Patel, IBM J. Res. Develop., vol 30, pp. 259-269, 1986). Since according to this conventional decoding method, the processing speed can be easily increased for the calculation of syndromes and error locations. However, since as is shown in FIG. 4 Forney algorithm is employed for the calculation of error value, two polynomials, i.e., the differential dΛ(x)/dx for the error locator polynomial and the error evaluator polynomial Ω(x), which are obtained by the syndromes and the error locator polynomial, must be evaluated, and then divisions must be performed. This is a critical path that prevents an increase in output speed, and the processing speed can not be satisfactorily increased.

[0016] According to OC-768 SONET, this is a large problem, because assuming the 16 interleave defined by ITU-G709 is employed as an input/output interface for the decoding circuit, a fast processing speed of 300 MHz or higher is expected. Therefore, as one attempt, the decoder in FIG. 4 is employed and divisions corresponding to the critical path are converted into detailed pipelines to increase output speed.

[0017] However, even when the process is converted into a pipeline, the decoding circuit in FIG. 4 must perform divisions at locations whereat no error is present, and the circuit size and the power consumption are increased as the pipeline is constructed. Further, to perform divisions only for error locations, the locations must be calculated in advance, so that the error locations and the error values can not be calculated in parallel. In addition, for the decoding circuit in FIG. 4, a cycle count required for the output of the error values differs depending on whether an error is present. Therefore, when a synchronous frame, such as SONET, for sequential data must be input or output at high speed, it is difficult to output error values at high speed for a constant cycle, without depending on error patterns (number of errors and their locations).

[0018]FIG. 5 is a diagram showing an additional conventional decoder. When the parallel Reed-Solomon decoding method in FIG. 1 is employed for the optical communication field, because its circuit processing capability is superior to those of other conventional methods no problem occurs when non-interleaved RS code is used for an application. However, for interleaved Reed-Solomon codes, as defined by ITU-T G.975, since signals must be rearranged using a large, high-speed buffer and selector, the parallel Reed-Solomon decoding method is not always efficient. That is, the length of (255, 239)RS code is 2040 bits, and when a 16-byte interleaving process is performed, a 16-byte input and 255-byte output serial/parallel converter and a parallel/serial converter for a 255-byte input and a 16-byte output are required, thereby considerably increasing the size of a circuit even though the processing speed can be increased to a required level. Therefore, it is difficult for the parallel Reed-Solomon decoding method to he provided at a practical level for optical communication.

[0019] For the calculation of error locations and error values used for the decoder, a large number of calculations in the Galois extension field GF(2^(m)) must be performed at high speed, and further, the size of a circuit that can perform this processing must be such that it facilitates the implementation of the circuit. Conventionally, in the studies of the calculations over a Galois field, it is important that how efficiently a single calculation (multiplication or division) can be performed, and the several tens to hundreds of calculations by a combinational circuit have almost never been discussed to date. As one of various reasons this has not been done, it may be presumed many decoding operations tend to be performed by sequential circuits, and it has been ascertained that the use of a combinational circuit provides little merit in terms of processing capabilities and an acceptable circuit size.

[0020] During the studies of the error correction calculation algorithm, the Yule-Walker equation that is defined for the Galois extension field GF(2^(m)) is generated in decoding of the Reed-Solomon codes. The efficient processing of this Yule-Walker equation is desirable if high-speed processing is to be achieved and the size of the necessary circuit is to be minimized. When the algorithm for solving the Yule-Walker equation is performed by a combinational circuit to achieve high-speed processing, in as the required error correction capabilities increase, the portion of the circuit used to solve the Yule-Walker equation and to locate errors becomes very significant from the viewpoint of the reduction in the size of the combinational circuit.

[0021] In addition, when a combinational circuit that can carry out the decoding of Reed-Solomon codes is applied for an actual system, it is preferable that an algorithm be provided that can be applied for the decoding of Reed-Solomon codes having an arbitrary minimum distance in order to obtain a process that can be widely used and to remove superfluous, additional circuits or processes. Especially in the optical communication field, since the use of (255, 239) Reed-Solomon code is standardized by the ITU, an algorithm is required that can efficiently decode the Reed-Solomon code where the maximum number of correctable errors is 8 and the minimum distance is 17.

[0022] In order to solve the mathematical problem posed by the Yule-Walker equation by using a hardware combinational circuit having a size that permits it to be implemented, increase in the circuit size must be suppressed, and an algorithm that can reduce the number of multipliers and a combinational circuit that can efficiently employ this algorithm are required. That is, a combinational circuit is needed that has an implementable size and that performs high-speed processing, and that includes the error correction device and the error correction algorithm described above.

SUMMARY OF THE INVENTION

[0023] To resolve the above shortcomings, it is one object of the present invention to provide an efficient combinational circuit for processing interleaved Reed-Solomon codes, and a signal processor and a semiconductor device that use this combinational circuit, for fast optical communication (40 Gbps or higher), or more specifically, for SONET using wavelength division multiplexing communication, in which sequential data are transferred as synchronous frames.

[0024] That is, according to the invention, a combinational circuit, which has a high processing capability (low latency and high throughput), and an encoder, a decoder and a semiconductor device that employ the combinational circuit are provided.

[0025] It is another object of the present invention to provide a flexible combinational circuit that can process interleaved Reed-Solomon codes without losing the above described characteristics, and an encoder, a decoder and a semiconductor device that employ the combinational circuit.

[0026] It is an additional object of the present invention to provide a combinational circuit that sequentially outputs error words at high speed and at a constant cycle rate, regardless of error patterns (error values and error locations) of each interleaved received word, and an encoder, a decoder and a semiconductor device that employ the combinational circuit.

[0027] It is a further object of the present invention to provide a combinational arithmetic circuit, circuits over a Galois extension field GF(2^(m)) (m is an arbitrary natural number equal to or greater than 2), that has several common inputs and performs multiple multiplications (e.g., AB, AC and AD) and a circuit that performs the logical sums such as AB+CD+EF+ . . . can be implemented as small, fast and efficient processing circuits, and to provide an encoder, a decoder and a semiconductor device that employ the combinational circuit.

[0028] To perform the decoding of Reed-Solomon codes by a combinational circuit and to apply this combinational circuit to an actual system, it is a still further object of the present invention to provide a combinational circuit that can provide a flexible process that can be applied for the decoding of Reed-Solomon codes having an arbitrary minimum distance and interleave configurations without an additional circuit or process being required, and to provide an encoder, a decoder and a semiconductor device that employ the combinational circuit.

[0029] The above objects can be achieved by providing a combinational circuit according to the present invention, and an encoder, a decoder and a semiconductor device that employ the combinational circuit.

[0030] According to the present invention, a combinational circuit comprises:

[0031] a plurality of multipliers, independently performing two or more multiplications for coded digital signals in a Galois extension field GF(2^(m)) (m is an integer equal to or greater than 2),

[0032] wherein the multipliers include an input side XOR calculator, an AND calculator, and an output side XOR calculator, and wherein the multipliers share the input side XOR calculator. In the combinational circuit of this invention, the input of the multipliers is commonly used. The combinational circuit is used for an error location calculator that calculates error locations for a digital signal transmitted using wavelength division multiplexing, and for an error value calculator. Syndromes obtained by the coded digital signal are input. The combinational circuit of this invention is used for decoding, error correction or encryption. The combinational circuit of the invention is used for a coding circuit and a decoding circuit for cryptography.

[0033] According to the invention, a combinational circuit performing logical sums for a Galois extension field GF(2^(m)) (m is an integer equal to or greater than 2) comprises: a plurality of multipliers, each of which includes an adder connected between an AND calculator and an output side XOR calculator, wherein the output side XOR calculator is used in common, and wherein the outputs of the AND calculators in the multipliers are added by the adders, and the addition results are calculated by the output side XOR calculator that is used in common. In the combinational circuit of this invention, the input of the multipliers is commonly used, and the input side XOR calculator is used in common by the multipliers. The combinational circuit is used for an error location calculator, for calculating error locations for a digital signal transmitted using wavelength division multiplexing, and for an error value calculator. Syndromes obtained by the coded digital signal is input. The combinational circuit of this invention is used for decoding, error correction or encryption.

[0034] Further, according to the invention, an encoder and a decoder including the combinational circuit are provided.

[0035] According to the invention, a semiconductor device used for processing a digital signal comprises:

[0036] input means, for receiving a coded digital signal;

[0037] processing means, for processing the coded digital signal and for calculating coefficients of an error locator polynomial and coefficients of an error value polynomial; and

[0038] output means, for outputting a digital signal by correcting errors using the error locator polynomial and the error value polynomial,

[0039] wherein the input means is constituted by a sequential circuit, and the processing means is constituted by a combinational circuit. In this invention, the combinational circuit comprises:

[0040] a plurality of multipliers, independently performing two or more multiplications for coded digital signals over a Galois extension field GF(2^(m)) (m is an integer equal to or greater than 2),

[0041] wherein the multipliers include an input side XOR calculator, an AND calculator, and an output side XOR calculator, and wherein the multipliers share the input side XOR calculator. Further, in this invention, the combinational circuit comprises: a logical sum calculator for a Galois extension field GF(2^(m)) (m is an integer equal to or greater than 2), and the multipliers each include an adder connected between the AND calculator and the output side XOR calculator, wherein the output side XOR calculator is used in common, and wherein the outputs of the AND calculators in the multipliers are added by the adders, and the addition results are calculated by the output side XOR calculator that is used in common. In the semiconductor device of the invention, the input of the multipliers is commonly used, and the input side XOR calculator is used in common by the multipliers. The combinational circuit is used for an error location calculator, for calculating error locations for a digital signal transmitted using wavelength division multiplexing, and for an error value calculator. The semiconductor device of this invention is used for decoding, error correction or encryption.

BRIEF DESCRIPTION OF THE DRAWINGS

[0042]FIG. 1 is a diagram showing a conventional decoder.

[0043]FIG. 2 is a diagram showing a conventional error correction device for optical communication.

[0044]FIG. 3 is a graph obtained by plotting a conventional circuit size and a data transfer speed.

[0045]FIG. 4 is a diagram showing another conventional decoding circuit.

[0046]FIG. 5 is a diagram showing an additional conventional decoder.

[0047]FIG. 6 is a schematic diagram showing a decoder according to one embodiment of the present invention.

[0048]FIG. 7 is a diagram showing a multiplier having a conventional configuration.

[0049]FIG. 8 is a diagram showing a multiplier having another conventional configuration.

[0050]FIG. 9 is a diagram showing a multiplier having an additional conventional configuration.

[0051]FIG. 10 is a diagram showing the embodiment wherein the present invention is applied for the multiplier in FIG. 7.

[0052]FIG. 11 is a diagram showing the embodiment wherein the present invention is applied for the multiplier in FIG. 8.

[0053]FIG. 12 is a diagram showing the embodiment wherein the present invention is applied for the multiplier in FIG. 9.

[0054]FIG. 13 is a graph obtained by plotting the circuit size and the number of multiplier when the multiplier according to the invention is employed.

[0055]FIG. 14 is a diagram showing a conventional error locator polynomial.

[0056]FIG. 15 is a diagram of a formula, according to the invention, established for the Yule-Walker equation.

[0057]FIG. 16 is a diagram showing the detailed structure of Γ_(i) ^((l+1)) according to the invention.

[0058]FIG. 17 is a diagram showing the detailed calculation results obtained, according to the invention, for decoding Reed-Solomon code.

[0059]FIG. 18 is a schematic flowchart for an error correction algorithm according to the present invention.

[0060]FIG. 19 is a schematic diagram showing the configuration of a Reed-Solomon code decoder according to the invention.

[0061]FIG. 20 is a schematic block diagram showing the configuration of an error correction device according to the invention.

DETAILED DESCRIPTION OF THE INVENTION

[0062] The preferred embodiment of the present invention will now be described by referring to the accompanying drawings. Note, however, that the present invention is not limited to this embodiment.

Section 1 Decoding Circuit

[0063]FIG. 6 is a diagram showing a decoder according to the present invention that can be used to correct errors in digital signals received through optical communication. The decoder in FIG. 6 includes an input unit 10, a processor 12 and an output unit 14. The input unit 10 receives a 16-byte interleaved digital signal ID. The processor 12 processes a signal received from the input unit 10 and calculates coefficients of an error locator polynomial and coefficients of an error value polynomial. And the output unit 14 obtains an AND of the Λ_((x)) evaluation result and E_(r(x)) evaluation result that are generated from the data received from the processor 12, performs an XOR process with the AND result and the input digital signal ID, and generates a digital signal OD. The digital signal OD is a signal in which errors that may have been included in the digital signal have been corrected.

[0064] In this invention, the digital signal ID input to the decoder in FIG. 6 can be one for which optical communication was used for its transmission, especially a signal transmitted by wavelength division multiplexing at a high data transfer rate of 40 Gbps. More specifically, the input digital signal ID can be, for example, a signal that is transmitted as (255, 239)RS code having a length of 2040 bits. Generally, for wavelength division multiplexing, by using the interleave method, the input digital signal is transmitted, for example, as a 16-byte parallel stream of 255 bytes to the decoding circuit of the invention.

[0065] In the decoder design in the invention in FIG. 6, input digital signals ID are interleaved and are input in parallel. A reception polynomial is defined for each input signal, and a syndrome Si is calculated using this polynomial and is output by the input unit 10. For (255, 239)RS code, the syndrome Si output by the input unit 10 (syndrome calculator) is generated as 16-byte digital information obtained from the 255 byte input digital signal. In the decoder for this embodiment in FIG. 6, the input digital signal of 2040 bits is interleaved, and the 16 255-byte serial streams that are obtained are transmitted to the input unit 10, while sixteen 16-byte syndromes corresponding to the 16 serial streams are generated by the input unit 10.

[0066] As is shown in FIG. 6, in the input unit 10, one syndrome calculator 16 is allocated for a serial stream IDS for each input digital signal ID, and calculates syndromes. The obtained syndromes for each serial stream IDS are stored in a register 18, and are output to the processor 12 one by one. For example, as is described above, 16 of 128 bit signals are obtained using the 16 interleaved 255 byte input digital signals in order to calculate error locations and error values. The syndrome calculator 16 that can be used for the input unit 10 in FIG. 6 can be any well known circuit, such as a circuit employing a sequential circuit. The method used for defining the syndromes and the calculation of the syndromes will be described later in detail.

[0067] In the decoder in FIG. 6, the obtained syndromes Si are sequentially transmitted to the processor 12. For convenience sake, for the explanation only one processor 12 is shown in FIG. 6. The processor 12 includes: an error locator polynomial calculator 18, which is a combinational circuit constituted by multiple multipliers and which is used to calculate an error locator polynomial Λ(x); and an error value polynomial calculator 20, which is used to calculate an error value polynomial Er(x). The combinational circuit that is used in the processor 12 and that includes multipliers will be described in more detail in Section 2 <Combinational circuit>.

[0068] The error locator polynomial Λ(x) and the error value polynomial Er(x), which are output by the processor 12 in FIG. 6, are demultiplexed by a demultiplexer (not shown) so as to, for example, correspond to the number of interleaves, and the results are transmitted to the output unit 14. The output unit 14 includes registers 22, and AND gates 24 and XOR gates 26, which are arranged in a number equivalent to the interleaves of input digital signals. The output unit 14 selects error values Er from the AND gates 24 by using the error location data Λ_(eval) (“1” for an error location or “0” otherwise) that are obtained by the syndromes. The selected error values E_(r) are added by the XOR gates 26, and each XOR gate receives, via buffers 28 a and 28 b of imn bits, a serial stream IDS obtained from the coded digital signal ID. When the subtraction of the Galois extension field GF(2^(m)) is performed by the XOR gate 26, the 255 byte digital signal OD from which an error has been removed is output.

[0069] In the decoder in FIG. 6 for this invention, the combinational circuit constituting the processor 12 can be a sequential circuit. However, in this invention, especially, a plurality of multipliers may be constituted by three stages, an input side XOR calculator group (variable pre-processors), an AND calculator group and an output side XOR calculator group (residual calculators) . When either one or both of the variable pre-processor and the residual calculator are used in common by multipliers, the size of the processor 12, which is the critical portion of the conventional calculation of error locations and error values, is practically allowable, and the processor 12 can be efficiently constituted by multipliers.

[0070] In the decoder of the invention in FIG. 6, the output unit 14 is constituted only by circuits, such as a constant multiplier and an adder, performing linear calculations, without a circuit being used to perform non-linear calculations that reduce the processing speed. Therefore, for this invention a decoding circuit having a small circuit configuration can be provided that performs a process without deteriorating the processing speed. Further, through the careful study to provide this invention, the present inventors found that a decoding circuit that is more flexible, faster and smaller than a conventional circuit could be constituted by using a combinational circuit that includes multipliers having a specific configuration, and an algorithm that permits the combinational circuit to efficiently calculate error locations and number of errors.

[0071] The method or the algorithm of the invention for the error locator polynomial calculation will, along with the combinational circuit, be described in detail later. An explanation will now be given for the function and the operation of the error value polynomial calculator 20 included in the processor 12 of the decoding circuit of the invention.

Selection of an Error Value Calculation Algorithm

[0072] According to the invention, an algorithm that can directly evaluate not only error locations but also error values through the calculation of the O(t)-degree polynomial (linear calculation) is applied for the decoding of interleaved Reed-Solomon codes. At this time, in the algorithm used for this invention, the division necessary for an error value calculation is not performed for each error location on a critical path that is output following the evaluation of a polynomial, but by using only one calculation for each code word before the evaluation of a polynomial. Therefore, the values obtained by the polynomial evaluation can be directly output as error values at high speed at a constant cycle rate.

[0073] Further, it has been found that the degree of the error value polynomial Er(x) can be reduced to the t-1 degree that is the least required to obtain t independent outputs. At this time, t coefficients can be calculated by using the coefficients of the error locator polynomial and the syndromes. By using this algorithm, not only the syndrome calculation and the error location evaluation, but also the error value evaluation can be performed merely by a linear operating circuit. Thus, the entire input/output circuit can be simplified and the processing speed can be increased.

[0074] Various error value polynomials can be used for the decoding algorithm or the decoding method of the invention. In the explanation of the function and the operation of the invention, the following example is employed wherein when e errors have occurred at i_(o), . . . and i_(e−1) the error value polynomial Er(x) is provided as ${{Er}^{(e)}(\chi)} = {\sum\limits_{l = 0}^{e - 1}\frac{E_{i_{l}}{\underset{j \neq l}{\Pi}\left( {\chi + a^{i_{j}}} \right)}{\underset{j,{k \neq l},{j < k}}{\Pi}\left( {a^{i_{j}} + a^{i_{k}}} \right)}}{\underset{j < k}{\Pi}\left( {a^{i_{j}} + a^{i_{k}}} \right)}}$

[0075] and where, while the division is included, the denominator is not a polynomial but is a constant for each code word (in the above equation, a denotes the primitive element of the Galois extension field).

[0076] The error value polynomial Er^((e))(x) can not be used as it is for the decoding circuit in this invention, because the k-th error value E_(i) _(k) (hereinafter referred to simply as E_(i) _(k) ), which is present at location a^(l) ^(_(k)) (hereinafter referred to simply as a^(l) ^(_(k)) ), is required for the calculation of the polynomial Er^((e))(x), and this makes no sense for the purpose of this invention. However, if all error values E_(i) _(k) in Er^((e))(x) and locations a., are written by the syndromes Si, this process can be provided as a circuit. Further, when all a^(i) ^(_(k)) s in Er^((e))(x) are described by the error polynomial Λ_(j) ^((e)), the error value can be calculated before the error locations are acquired. Therefore, the calculation of error values can be performed in parallel, and as a result, the processing speed can be increased.

[0077] The above process can be performed by using the following decoding algorithm or decoding method. First, the denominator is written by Λ_(j) ^((e)). The coefficients of the error value and error locator polynomials are elementary symmetric functions for error locations

a ^(i) ^(₀) , a ^(i) ^(₁) , a ^(i) ^(₂) , . . . , a ^(i) ^(_(t-1))

[0078] excluding a constant factor. For example, for coefficients of the error locator polynomial, Λ₁, Λ₂, . . . , Λt, the following equations are established: $\Lambda_{1} = {\sum\limits_{k}a^{i_{k}}}$ $\Lambda_{2} = {\sum\limits_{k < l}{a^{i_{k}}a^{i_{l}}}}$ $\begin{matrix} {\vdots \quad} \\ {\Lambda_{t - 1} = {a^{i_{0}}a^{i_{1}}a^{i_{2}}\cdots \quad {a^{i_{t - 1}}.}}} \end{matrix}$

[0079] The error locations a^(l) ^(₀) , a^(i) ^(₁) , a^(i) ^(₂) , . . . , a^(i) ^(_(t-1)) can be exchanged with each other. Further, the following new relation $\begin{matrix} {f^{(e)} = {\underset{m > l}{\Pi}\left( {a^{i_{m}} + a^{i_{l}}} \right)}} \\ {= {\begin{matrix} \Lambda_{1}^{(e)} & \Lambda_{3}^{(e)} & \cdots & 0 & \cdots & 0 \\ 1 & \Lambda_{2}^{(e)} & \Lambda_{4}^{(e)} & \cdots & 0 & {\cdots 0} \\ 0 & \Lambda_{1}^{(e)} & \Lambda_{3}^{(e)} & \cdots & 0 & {\cdots 0} \\ \vdots & \quad & ⋰ & \quad & \quad & \vdots \\ 0 & \cdots & 0 & \cdots & \Lambda_{e - 2}^{(e)} & \Lambda_{e}^{(e)} \\ 0 & \cdots & 0 & \cdots & \Lambda_{e - 3}^{(e)} & \Lambda_{e - 1}^{(e)} \end{matrix}}} \end{matrix}$

[0080] can be obtained by a relation (e.g., see “Symmetric Functions and Orthogonal Polynomials”, I. G. Macdonald, American Mathematical Society, 1998) that is established between the Elementary symmetric function and the Shur function defined by the division of two Vandermonde matrixes, and the exchange relation, (a+b)²=(a−b)²=a²+b², that is established between the addition and the square performed for the Galois extension field GF(2^(m)).

[0081] When the above determinant is employed, the denominator of Er^((e))(x) can be written by Λ_(i) ^((e)). When the numerator of Er^((e))(x) is calculated in the same manner, as is indicated by the following equation, the coefficients of Er^((e))(x) can be written merely by Si and Λ_(i) ^((e)), and can be calculated without using E_(l) _(k) and a^(i) ^(_(k)) . $\begin{matrix} {{{Er}^{(e)}(\chi)} = \frac{\sum\limits_{k = 0}^{e - 1}{E_{i_{k}}{\underset{j \neq k}{\Pi}\left( {\chi + a^{i_{i}}} \right)}{\underset{m,{l \neq k},{m > l}}{\Pi}\left( {a^{i_{m}} + a^{i_{l}}} \right)}}}{\underset{m > 1}{\Pi}\left( {a^{i_{m}} + a^{i_{i}}} \right)}} \\ {= \frac{\sum\limits_{k = 0}^{e - 1}{{E_{i_{k}}\left( {\sum\limits_{j = 0}^{e - 1}{\chi^{j}\Lambda_{e - j - 1_{i_{k}}}^{(e)}}} \right)}{f^{({e - 1})}\left( {\Lambda_{1i_{k}}^{(e)},\Lambda_{2i_{k}}^{(e)},\ldots \quad,\Lambda_{e - {1i_{k}}}^{(e)}} \right)}}}{f^{(e)}\left( {\Lambda_{1}^{(e)},\Lambda_{2}^{(e)},\ldots \quad,\Lambda_{e}^{(e)}} \right)}} \\ {= \frac{\sum\limits_{k,j,{m = 0}}^{e - 1}{E_{i_{k}}a^{i_{k^{m}}}\chi^{j}{{Er}_{jm}^{(e)}\left( {\Lambda_{1}^{(e)},\Lambda_{2}^{(e)},\ldots \quad,\Lambda_{e}^{(e)}} \right)}}}{f^{(e)}\left( {\Lambda_{1}^{(e)},\Lambda_{2}^{(e)},\ldots \quad,\Lambda_{e}^{(e)}} \right)}} \\ {= \frac{\sum\limits_{j,{m = 0}}^{e - 1}{S_{m}\chi^{j}{{Er}_{jm}^{(e)}\left( {\Lambda_{1}^{(e)},\Lambda_{2}^{(e)},\ldots \quad,\Lambda_{e}^{(e)}} \right)}}}{f^{(e)}\left( {\Lambda_{1}^{(e)},\Lambda_{2}^{(e)},\ldots \quad,\Lambda_{e}^{(e)}} \right)}} \end{matrix}$

[0082] where Λ_(ji) _(k) ^((e))=Λ_(j) ^((e))a^(l) ^(_(k)) Λ_(j-li) _(k) ^((e)). Specifically, this coefficient, is that of the error locator polynomial that corresponds to the error location except a^(lk).

[0083] As is described above, when these new relations are employed, the output unit 14 can be constituted by a linear operating circuit for the Galois extension field GF(2m), without a non-linear operating circuit being required, and the processing speed can be increased. The following configuration is employed to constitute a fast, small coding circuit that can also cope with interleaved codes based on the above error value calculation algorithm.

[0084] 1. Use of Fast Input Unit and Output Unit (Linear Operating Circuit)

[0085] First, in consideration of the structure of the code (the number of interleaves), the bus width of an input/output interface and the number of clocks, a polynomial evaluation (linear operating) circuit, which is connected to the input side to calculate syndromes, and a polynomial evaluation (linear operating) circuit, which is connected to the output side to evaluate error locations and error values, are implemented as fast sequential circuits that employ a cyclic structure that comes from the fact that RS codes are cyclic codes, and that perform a pre-process and a post-process for (n, k) Reed-Solomon code at an arbitrary number of clocks from 1 to n. Especially effective for the invention is the fact that the above described structure is also employed for an error value evaluation portion that is a critical path for the conventional method. According to the structure of the invention, a decoding circuit can be provided as an interface that can flexibly cope not only with an input digital signal that has 255 bytes for each code word, but also with ones that have 1, 3, 5, 15, 17, 51 and 85 bytes.

[0086] Table 1 shows the relation between the width of a digital signal input to the decoding circuit and the processing clock required for this input width. TABLE 1 The input/output width and a clock count for each code word (n = 255) Input/output 1 3 5 15 17 51 85 255 width (bytes) Clock count 255 85 51 17 15 5 3 1 required for processing a code word (n = 255)

[0087] As is shown in Table 1, although the required number of clocks is increased as the width of the input digital signal is reduced, the decoder of the invention can flexibly cope with it.

[0088] In addition, in this invention, an arbitrary input/output byte width other than those in Table 1 can be selected for each code word. For example, an input/output width of eight bytes can be coped with when the code length is n =256 bytes by adding a one byte dummy at the end.

[0089] 2. Connection to a Non-Linear Operating Circuit 12

[0090] In this invention, a plurality of input units 10 and output units 14 that are constituted by sequential circuits are prepared in a number equivalent to the interleaves. Between these units, the non-linear operating circuit 12 is connected that calculates the coefficients of an error locator and error value polynomials by a multiplexer, a demultiplexer and a circuit for holding the syndromes and the coefficients of an error locator and error value polynomials. As is described above, this operating circuit 12 is constituted as a combinational circuit for a non-linear operating circuit, such as a multiplier that performs non-linear calculation. Therefore, in this invention, in the case where ITU-T G.709 (255, 239) Reed-Solomon code is obtained by 16-byte interleaving, 16 sequential circuits must be prepared before and after the operating circuit 12. In other words, in this case, multiplexing and demultiplexing must be performed at a ratio of 16:1. However, in this invention, in order to multiplex and demultiplex the coefficients of the syndrome polynomial, only a signal of 128 bits (or 136 bits at the succeeding state, depending on how Λ(x) is defined) need be processed instead of 2040 bits, so that the required numbers of multiplexers, demultiplexers and buffers can be greatly reduced.

[0091] 3. Three-Stage Pipeline Operation System That Employs the Non-Linear Operating Circuit in the Center in a Time Sharing Manner

[0092] According to the present invention, the entire decoder is operated as a three-stage pipeline formed from a linear operating circuit (syndrome calculation), a non-linear operating circuit (calculation of coefficients for error locator and error value polynomials) and a linear operating circuit (evaluation of error locations and error values) and the non-linear operating circuit of a low latency is employed in a time sharing manner by serially providing syndromes for code words for the calculation of interleaved code. Therefore, it is possible to provide efficient decoding of interleaved codes whose processing capability per circuit size is high. In the OC-768 case, for example, in order to operate the three-stage pipeline, the non-linear operating circuit in the center must complete the process for each interleaved code word at a latency of about 40 ns. When the combinational circuit is implemented by the most advanced semiconductor technique (0.18 μm or better), the above decoder can be provided as an ASIC semiconductor device.

[0093] More specifically, in the invention, fast decoder and error correction devices, the sizes of which fall within an acceptable range, can be provided by synergistic effects obtained by: (1) the use of a fast input unit 10 and a fast output unit 14, especially the use of only a linear operating circuit when calculating error locations and error values, the application of the above described algorithm for the processor 12, and the use of a configuration for a multiplier that can reduce the circuit size, and (2) the employment of the three-stage pipeline operation system by, in a time sharing manner, the processor 12, which essentially performs a non-linear calculation. In section 2, which follows, an explanation will be given for a combinational circuit that comprises multipliers included in the processor 12 of the decoder of the invention.

Section 2 Combinational Circuit

[0094] The processor 12 used for the decoder of the invention is a nonlinear circuit, specifically, a combinational circuit that uses multipliers. Unlike multipliers used for a conventional combinational circuit that has two stages, consisting of an AND calculator group and an XOR calculator group, in order to perform the multiplication of the Galois extension field GF(2^(m)), the multiplier used for this invention has three stages, consisting of XOR gates, AND gates and XOR gates.

Configuration of a Single Parallel-Multiplier

[0095] While many studies have been made of a single multiplier, a parallel multiplier (Mastrovito Multiplier), which is constituted as a combinational circuit, not as a sequential circuit, is a field of active research. For a conventional parallel multiplication circuit (hereinafter, in this specification, referred to simply as a multiplier), there are two configuration types: the AND-XOR type and the XOR-AND-XOR type, which can be converted into each other. It should be noted, however, that the AND-XOR type is generally employed when a circuit is provided for only a single multiplication. This is because while the AND-XOR type has been well studied and various methods for obtaining a small circuit have been proposed, there is no guarantee that the circuit size for the XOR-AND-XOR type will be reduced (or may be increased), and the reduction effects can not be obtained that would compensate for the expenditure of the effort a complicated design operation would entail. The AND-XOR type and the XOR-AND-XOR type will be further described.

[0096] 1. AND-XOR Type

[0097] This is a typical method used for performing calculations in the same manner as are calculations performed with figures written down on paper, and generally a circuit of this type is employed. Specifically, the coefficients of two (m-1)th degree polynomials, which are multiplication arguments, are combined to prepare m² partial products. This is the processing performed by the AND section. Then, partial products that have the same degree are added together to form a (2m-2)th degree polynomial, and a residue operation using an irreducible polynomial is performed to obtain the (m-1)th degree solution. This is the processing performed by the XOR section. The number of ANDs is m² and the number of XORs is O(m³), and it is widely known that (m²-1) XORs can be obtained by selecting an appropriate irreducible polynomial and basis. An arbitrary multiplier can always be constituted by this method.

[0098] 2. XOR-AND-XOR Type

[0099] Generally, according to the Boolean algebra rule (A and B) xor (A and C)=A and (B xor C), it is possible for the XOR calculation in the residue operation unit of the AND-XOR circuit to be moved in front of the AND for use as a variable pre-processor (input side XOR calculator) . Thus, the XOR-AND-XOR multiplication circuit can be obtained. For moving the XOR calculation, when an even number of the same redundant terms are added to the XOR of the residue operation unit (output side XOR calculator) by the properties A xor A=0 and B xor 0=B, many XOR calculations may be moved to the front-end as a pre-processor. Since this operation can be employed, various methods for moving the XOR are available, in addition to the simple application of the distributive law. Therefore, multiple AND-XOR types are present even with the same basis or irreducible polynomial. The number of gates in the XOR-AND-XOR type can vary, and may become either greater or smaller than that in the AND-XOR type. Another method is known whereby the number of XOR gates is systematically reduced by choosing a special basis, such as the Composite Field Multiplier that will be described below.

[0100] 3. A Method for Constructing an XOR-AND-XOR Type that can be Applied Only for a Limited Field (Composite Field Multiplier)

[0101] The composite field multiplier is a multiplier construction method that can be used only in a special case, such as where m is a composite number and the basis used for the representation of an element in a field may not be an ordinary basis (such as polynomial basis or normal basis). This method will now be described in detail. When m is a composite number, extension field GF(2^(m)) can be constructed by two fold extensions of the field GF(2) . The composite field multiplier method is a method for constructing, in accordance with the extension process, a multiplier having a recursive structure. At this time, when the product of the two values Ax+B and CX+D in GF(2^(m)) (A, B, C and D are values in the sub-field GF(2^(m/2)))

(Ax+B)(Cx+D)=ACx ²+(((A+B)(C+D)+AC+BD)x+BD)

[0102] is employed for one quadratic extension, the number of multiplications performed in the sub-field can be reduced from four to three, and the circuit size can be reduced (KOA). At the same time, the circuit can be provided as an XOR-AND-XOR structure (the addition performed before the multiplication corresponds to the XORs arranged in front of AND). It should be noted that the use of KOA is premised on the use of the composite field multiplier, otherwise, KOA can not be used. If the value of m is the composite number for which this method can be applied, a field converter is required, and the circuit size is increased because of the overhead. Thus, when a circuit is to be prepared for only a single multiplication operation, the circuit structure does not generally, employ the composite field multiplier.

Configuration of a Combinational Circuit According to the Invention Using Ordinary Multipliers

[0103]FIGS. 7 and 8 are diagrams showing a configuration wherein multipliers with common input and a logical sum calculation circuit for the invention are constituted by a common AND-XOR type. In the example in FIG. 7, a combinational circuit using two multipliers is shown. As is shown in FIG. 7, a first input A1 is transmitted to both a multiplier 40 and a multiplier 42, while a second input B1 is transmitted o the multiplier 40 to obtain a first output 45, and a third input B2 is transmitted to the multiplier 42 to obtain a second output 46. In the conventional structure in FIG. 7, even though the multipliers receive common input, no circuit exists that these multipliers can employ in common. In the example in FIG. 8, the conventional multiplier structure is employed for a combinational circuit that performs logical sum calculations. It is again apparent that in FIG. 8 no circuit exists that the multipliers can use in common when performing logical sum calculations.

[0104]FIG. 9 is a diagram showing a combinational circuit employing conventional multipliers. In FIG. 9, one symbol is represented by one line, and 8-bit width input and output are assumed. The combinational circuit in FIG. 9 includes six-symbol input and one-symbol output, and seven multiplication circuits and five addition circuits. In the combinational circuit in FIG. 9, inputs S0, . . . and S3Q are transmitted to multipliers 46 and are added together by adders 48. The results are then transmitted to a logical sum calculation circuit 50 whereat an output L21Q, the logical sum of the inputs, is generated.

[0105] In FIG. 9, a combination of cross-term generation operation and residue operation, indicated by broken lines, corresponds to one multiplication. Since a standard circuit structure is used for the multipliers shown in FIG. 9, no detailed explanation will be given for the circuit. The combinational circuit, including the multiplication circuit, includes 64 AND gates and about 103 XOR gates, and for the entire circuit, the number of gates is 448 ANDs +about 761 XORs. As is apparent from FIG. 9, for almost all the multipliers, one or both inputs are used in common by another multiplier. Further, the logical sum calculation is performed at the final stage.

[0106] Table 2 shows the numbers of gates that are included in multiplication circuits for a Galois extension field GF(2⁸). They are conventional multiplier which has two-stage AND-XOR structure, a composite field multiplier, and a multiplication circuit, for which XOR-AND-XOR is employed for the multiplication of a sub-extension field GF(2⁴). TABLE 2 Variable Cross-term Residue pre-process generation operation Standard AND-XOR None + 64AND + 103XOR multiplication circuit Composite Field Multiplier  4XOR*2 + 48AND  + 56XOR XOR-AND-COR circuit for performing the multiplication of sub-extension field GF(2⁴) to obtain the effects of the invention a. Alteration of all three 22XOR*2 + 30AND  + 44XOR multiplications of a sub-field b. Alteration of two out 16XOR*2 + 36AND  + 48XOR of three multiplications c. Alteration of one out 10XOR*2 + 42AND  + 52XOR three multiplications

[0107] AS can be seen from Table 2, as far as only a single multiplier is concerned, the circuit sizes for cases a. to c. are increased when compared with the size of the conventional composite field multiplier, and are not the minimum size. As is described above, when the three-stage XOR-AND-XOR structure is simply employed for a single multiplier, in some cases the circuit size may be increased.

Multiplier Structure for a Combinational Circuit According to the Invention

[0108] Generally, optimization of Boolean algebra is difficult when many multiplications and logical sum calculations are performed together. However, in consideration of the use of the combinational circuit as the processor 12 for the invention, many logical sum calculators and many multipliers are connected in parallel at multiple stages. The i-th logical sum calculator generally receives 0-th to (i-1)th outputs. Therefore, since the backend part of the operation circuit must process in parallel inputs used in common by almost the entire combinational circuit, the optimization range is extended. The present inventors focused on this point, and achieved an efficient configuration for a multiplier by performing the optimization for Boolean algebra, while taking into account the balance obtained with other operations.

[0109]FIG. 10 is a diagram showing a combinational circuit according to the embodiment wherein a three-stage structure is employed for the multiplier in the combinational circuit in FIG. 7, which includes conventional multipliers and adders. In the combinational circuit in FIG. 10, an input A1 is transmitted to a first XOR group 52, an input B1 is transmitted to a second XOR group 54, and an input B2 is transmitted to a third XOR group 56. These XOR groups 52, 54 and 56 are gates used by this invention to perform the variable pre-process. Since the XOR groups 52 process the common input A1, the circuit size is reduced. The outputs of the XOR groups 52, 54 and 56 are transmitted to AND groups 58, and when a cross-term is obtained, the residue operation is performed again by downstream XOR groups 60, an output 62 being generated by an XOR group 60 a, and an output 64 being generated by an XOR group 60 b. In FIG. 10, the unit for performing one multiplication is indicated by broken line BL, and three stages, a variable pre-processor (XOR)—a cross-term operation unit (AND)—a residue operation (XOR), constitute one multiplier. As is shown in FIG. 10, when the XOR-AND-XOR structure is employed for each multiplier, and when for the multipliers the XOR calculations to be performed for an input used in common is unified, the XOR calculation circuits can be shared by the multipliers. So long as the size of a portion (variable pre-processors*2+new cross-term generation+new residue operation unit) that corresponds to one multiplier is the same or slightly larger than the normal multiplication circuit, the size of the entire multiplier group can be reduced.

[0110]FIG. 11 is a diagram showing a combinational circuit according to another embodiment wherein a three-stage multiplier used for the invention is mounted for the conventional combinational circuit in FIG. 10. In the combinational circuit in FIG. 11, inputs 66, 68, 70 and 72 are transmitted to XOR groups 74, 76, 77 and 78 that perform the variable pre-process, and the outputs of the individual XOR groups are transmitted to AND groups 80 and 82 that perform the cross-term generation operation.

[0111] The outputs of the AND groups 80 and 82 are transmitted to an addition circuit 84 and are added together, and the residue operation and the multiplication are again performed by a backend XOR group 86 that is used in common, so that an output 88 is generated. The structure of one multiplier in FIG. 11 is formed in a block Bx. The difference from the structure in FIG. 10 is that, in the invention, even when the XOR groups 74, 76, 77 and 78 on the input side are not shared the backend or output side XOR group 86 that performs the residue operation is used in common.

[0112] Further, in the invention, when the XOR groups 74 to 78 on the input side, which perform the variable pre-process, are used in common, and the XOR groups that perform the residue operation are also used in common, the overall structure of the combinational circuit can be simplified.

[0113]FIG. 12 is a diagram showing a combinational circuit according to an additional embodiment wherein a three-stage structure is employed for the multiplier in the combinational circuit in FIG. 9. The combinational circuit in FIG. 12 constitutes a part of the processor 12 in the decoder (e=2) in FIG. 6 for error correction by RS codes. The combinational circuit in FIG. 12, as does the conventional example in FIG. 9, receives input S0 to S3Q, and as is shown in the blocks in FIG. 12, an XOR gate 90 that performs the variable pre-process for input S0 is used in common by three multipliers that correspond to AND gates 92, 94 and 96. A residue operation unit 98 is shared by a plurality of multipliers, and both an XOR gate used for the variable pre-process and an XOR gate used for the residue operation are used in common. One multiplier is indicated by a chained line. In the combinational circuit in FIG. 12, eight variable pre-processors, seven cross-term generation operation units, four residue operation units, two 8-bit adders, and three adders having the same bit width as the cross-term generation operation unit are provided.

[0114] Therefore, when, based on the multiplication circuits in Table 2, a part of the decoder is to be constituted by the combinational circuit in FIG. 12, the number of gates required can be determined as shown in Table 3. TABLE 3 Composite Field Multiplier 416XOR + 336AND Total 752gate Present invention a. Alteration of multiplication for all 458XOR + 210AND Total 668gate three sub-fields b. Alteration of multiplication for two 444XOR + 252AND Total 696gate of the three sub-fields c. Alteration of multiplication for one 430XOR + 294AND Total 724gate of the three sub-fields

[0115] It is apparent from a. to c. in Table 3, that even if the single multiplier is not intentionally minimized, the overall size of the circuit can be reduced.

[0116]FIG. 13 is a graph showing the number of XOR gates and the number of corresponding multipliers that are required for use for the processor 12 in the error correction circuit having the error correction capability t=2 to 8 in FIG. 6. In FIG. 13, the vertical axis represents the total number of XORs, and the horizontal axis represents the number of multipliers. In this case, for the decoder for error correction in FIG. 6, m =8 and the irreducible polynomial is x⁸+x⁴+x³+x²+1. In this case, 662 multiplications, 531 additions and 30 square calculations are performed. As is apparent from Table 3 and FIG. 13, even if the single multiplier is not intentionally minimized, by the configuration of the invention, a greater reduction can be obtained in the overall size of the combinational circuit.

[0117] In the embodiment in FIG. 13, the same variable pre-processor, cross-term generation operation unit and residue operation unit were used for all the multiplications in order to clearly present a specific circuit structure. In order to obtain better results when these circuits are actually implemented, the number of XORs in the arrangements for the variable pre-processor and the residue operation unit (i.e., which of a. to c. is to be employed) can be changed and optimized for each multiplication operation performed by the circuit. Further, in the embodiment in FIG. 13, since the ratio of the number of operations to the number of inputs is small and an overhead for field conversion is also present, no very great effect is obtained by reducing the number of gates. However, in actuality, since as is shown in FIG. 14 the ratio of the operations to the input is quite high, because of the effects produced by a reduction in the number of gates the circuit size can be dramatically reduced.

Section 3 Error Correction Algorithm

[0118] A detailed explanation will now be given for an error correction algorithm that is used by the decoding circuit and the error correction device of the invention.

OVERVIEW OF THE CONVENTIONAL EXAMPLE

[0119] A. Conventional Method for Solving the Yule-Walker Equation or for Obtaining an Error Locator Polynomial, and a Problem Associated With These Methods

[0120] According to the invention, it is necessary to find an efficient algorithm for a combinational circuit to calculate the following simultaneous linear equation, which is defined over GF(2^(m)), ${\begin{pmatrix} S_{0} & S_{1} & \cdots & S_{l - 1} \\ S_{1} & S_{2} & \cdots & S_{l} \\ \vdots & \quad & ⋰ & \vdots \\ S_{l - 1} & S_{l} & \cdots & S_{{2l} - 2} \end{pmatrix}\begin{pmatrix} \Lambda_{l}^{(l)} \\ \vdots \\ \vdots \\ \Lambda_{l}^{(l)} \end{pmatrix}} = \begin{pmatrix} S_{l} \\ \vdots \\ \vdots \\ S_{{2l} - 2} \end{pmatrix}$

[0121] where S₀, S₁, . . . S_(2t-1) are the elements of a given GF(2^(m)), and Λ_(i) ^((l)) is an unknown amount.

[0122] In this simultaneous linear equation, the matrix on the left has a regular structure wherein the same elements are arranged obliquely to the right (the direction irtersecting the diagonal line), and is called a Hankel matrix. Generally, this type of equation is called a Rule-Walker equation, and it is known that this equation is widely applied for various fields, such as the error correction code theory, time-series analysis and signal processing. In the error correction algorithm, the Yule-Walker equation appears in the portion for determining an error locator polynomial. Therefore, according to the present invention, the algorithm for obtaining the solution for the Yule-Walker equation is applied as an error correction algorithm for decoding the Reed-Solomon codes.

[0123] The well known methods for solving the Yule-Walker equation are, for example, the algorithm proposed by Levinson and the algorithm proposed by Levinson-Durbin. These algorithms start calculating with a matrix of the smallest size l and recursively determine the solution of an equation wherein the size of a matrix is greater. The number of calculations required by these two algorithms is of order of l². However, these algorithms include divisions in the calculation step. This means that when the algorithm is mounted as a combinational circuit, conditional branches occur depending on whether the denominator is 0 or not. Since a separate circuit must be prepared for each conditional branch, the required circuit size increases as the size of the matrix increases.

[0124] Further, as the object of the invention, especially relative to the decoding of the Reed-Solomon codes, an error locator polynomial is determined by obtaining the solution to the Yule-Walker equation. The conventional methods for solving the Yule-Walker equation can be, for example, the Peterson method, the Berlekamp-Massey method and the Euclid method. These methods are used to calculate the coefficients of an error locator polynomial by calculations of which the number is polynomial order with respect to the maximum number of correctable errors t. However, when the Berlekamp-Massey method and the Euclid method are represented by a combinational circuit, the following problems occur.

[0125] First, for the Berlekamp-Massey method, it is inevitable that multiple conditional branches should be included in the algorithm. Therefore, to expand this algorithm for a combinational circuit, for the same reason as described above, the circuit size would be increased in accordance with the number of combinations. As for the Euclid method, while the multiplication and division of the polynomial are the essential part of the algorithm and, the degree of a polynomial that appears in the denominator of the division can not be identified in advance, so that there is room for generating a conditional branch. Furthermore, clue to the conditional branches, the circuit size is accordingly increased, as it is for the Berlekamp-Massey method.

[0126] B. Policy for Calculating the Yule-Walker Equation and an Error Locator Polynomial that is Appropriate for a Combinational Circuit

[0127] Since, as is described above, the Levinson(-Durbin) method, the Berlekamp-Massey method and the Euclid method include conditional branches, a problem has arisen in how to provide these methods as combinational circuits. In order to implement the Yule-Walker equation by a combinational circuit, an algorithm that has no conditional branching must be found, and this is an essential object for the algorithm of the invention.

[0128] In this case, the Peterson method known for decoding of the Reed-Solomon codes can be used as the algorithm of the invention. Using the Peterson method, the Yule-Walker equation can be solved directly, and the solution of the Yule-Walker equation can be represented as determinants by the Cramer formula: $\begin{matrix} {{\Lambda_{i}^{(l)} = \frac{{\overset{\sim}{\Lambda}}_{i}^{(l)}}{{\overset{\sim}{\Lambda}}_{0}^{(l)}}},{i = 1},\ldots \quad,l} \\ {{\overset{\sim}{\Lambda}}_{0}^{(i)} = {\begin{matrix} S_{0} & S_{1} & \cdots & S_{l - 1} \\ S_{1} & S_{2} & \cdots & S_{l} \\ \vdots & {\vdots \quad} & ⋰ & \vdots \\ S_{l - 1} & S_{l} & \cdots & S_{{2l} - 2} \end{matrix}}} \\ {{{\overset{\sim}{\Lambda}}_{i}^{X{(l)}} = {\begin{matrix} S_{0} & S_{1} & \cdots & S_{l - 1} \\ \vdots & \cdots & ⋰ & \vdots \\ S_{l - i - 1} & S_{l - i} & \cdots & S_{{2l} - i - 2} \\ S_{l - i + 1} & S_{l - i + 2} & \cdots & S_{{2l} - i} \\ \vdots & \cdots & ⋰ & \vdots \\ S_{l} & S_{l + 1} & \cdots & S_{{1l} - 1} \end{matrix}}},{i = 1},\ldots \quad,{l - 1}} \\ {{\overset{\sim}{\Lambda}}_{i}^{(l)} = {{\begin{matrix} S_{1} & S_{2} & \cdots & S_{l} \\ S_{2} & S_{3} & \cdots & S_{l + 1} \\ \vdots & {\vdots \quad} & ⋰ & \vdots \\ S_{l} & S_{l + 1} & \cdots & S_{{2l} - 1} \end{matrix}}.}} \end{matrix}$

[0129] Therefore, determinants Λ_(O) ^((l)) need be obtained for each l=1, . . . , t, and the determinants {tilde over (Λ)}_(i) ^((e)), i=l, . . . , e need be calculated for the number of errors e.

[0130] However, when the expansion of the determinants is provided by using a circuit, the required number of multipliers is dramatically increased as t is increased, so that it is difficult for the determinants to be directly expanded. Therefore, in this invention, the number of calculations is reduced by the recursive structure of the Hankel matrix. The calculation of Λ_(i) ^(nat(l)) using the Katayama-Morioka method will be explained.

[0131] When the calculation algorithm for Λ_(i) ^((l)) in the Katayama-Morioka method is written for l=1 to l=4, the form in FIG. 14 is obtained.

[0132] For comparison, a method devised by Koga will now be described as another method for recursively calculating the Hankel matrix. According to the method by Koga, new error locator polynomial _(i;l+2u)D(X, Y) is defined, wherein $\quad_{i;{i + {2u}}}{D\left( {X,Y} \right)} = {\begin{pmatrix} {S_{i} + {YX}^{i}} & {S_{i + 1} + {YX}^{i + 1}} & \cdots & {S_{i + u} + {YX}^{i + u}} \\ {S_{i + 1} + {YX}^{i + 1}} & {S_{i + 2} + {YX}^{i + 2}} & \cdots & {S_{i + u + 1} + {YX}^{i + u + 1}} \\ \vdots & \vdots & ⋰ & \vdots \\ {S_{i + u} + {YX}^{i + u}} & {S_{i + u + 1} + {YX}^{i + u + 1}} & \cdots & {S_{i + {2u}} + {YX}^{i + {2u}}} \end{pmatrix}.}$

[0133] To calculate this new error locator polynomial, the Hankel matrix _(i;l+2u)Q, which has the i-th syndrome S_(l) as the (1, 1) element, is employed, and a determinant obtained by symmetrically removing multiple rows and columns from this Hankel matrix is defined as a Q determinant. When the subscript numbers of syndromes that appear as a diagonal element are designated in order beginning at the upper left, only one Q determinant can be determined. In this case, the Q determinant can be represented by the row of subscripts [a₁, a₂, . . , a_(p)]. According to the Koga method, an algorithm is presented by to calculate error locator polynomial _(i;i+2u)D(X, Y) the Q determinant.

[0134] All of the above described conventional methods have the following problems. First, for the algorithm used in FIG. 14 for calculating Λ_(i) ^((l)), new terms sequentially appear on the right due to the asymmetry of determinants to be calculated, and as a result, as the size of a matrix is increased, the number of multipliers that is required is increased accordingly. Thus, an algorithm for which the combinatorial increase of the number of multipliers is as small as possible is preferable.

[0135] As for the Koga algorithm, the Q determinant defined by Koga is symmetrical, and a reduction in the number of multipliers is carried out. However, there is a limitation on the use of the Koga algorithm; this algorithm can be applied for BCH codes or Reed-Solomon codes only when the minimum distance is an even number. Although it is disclosed in the Koga algorithm that this limitation can be eased, such an application example is limited to the binary, narrow sense BCH code.

[0136] According to the invention, since the combinational circuit is applied for an optical communication system, it is required as an object that the decoding of the (255, 239) Reed-Solomon code (minimum distance=17) be efficiently carried out by the combinational circuit. Therefore, an algorithm is needed that can perform an efficient calculation by a specific method, regardless of whether the minimum distance is an odd or even number.

[0137] C. Definitions of Terms Used for this Invention

[0138] Before a detailed explanation is given for the algorithm of this invention, definitions for the terms used for this invention will be given.

[0139] 1. Syndrome

[0140] Generally, when a primitive element of the Galois extension field GF(2^(m)) is defined as a, and h<2^(m)-1 is (a positive integer, a 2^(m)-element cyclic code that has a code length of n=2^(m)-1 and that employs

G(x)=(x−1)(x−a)(x−a ²) . . . (x−a ^(h−l))

[0141] as a generator polynomial is defined as the Reed-Solomon codes. That is, when k=n−h and when the k-th degree polynomial having k information symbols as its coefficients is defined as M(x), M(x) and x^(n−k) are multiplied, and the result is divided by G(x), as follows, to obtain the residue R(x).

M(x)x ^(n−k) =Q(x)G(x)+R(x)

[0142] Then, the polynomial (transmission polynomial) that has as coefficients a coded sequence having the length n is defined as

W(x)=M(x)x ^(n−k) −R(x)=Q(x)G(x).

[0143] At this time, the coded transmission sequence is represented as systematic code, of which k information symbols are located on the left and h=n−k check symbols follow these symbols. The minimum distance d_(min)=h+1 of the Reed-Solomon code, and the maximum number of correctable errors t=[h/2] are provided.

[0144] The following decoding algorithm is given for making an estimation of the original transmission sequence based on a received sequence.

[0145] 2. Calculation of Syndromes and Detection of an Error

[0146] Assume that errors have occurred, and that the locations of the errors are denoted by i_(o), . . . , i_(l−1) and the error values are denoted by E_(i) ₀ , . . . , E_(i) _(l−1) . A polynomial having E ₀ , . . . , E_(i) _(l−1) as coefficients is defined as

E(x)=E _(i) ₀ x ^(l) ^(₀) . . . +E _(i) _(l−1) x ^(l−1),

[0147] a polynomial having a received sequence of b_(o), . . . , b,_(n−1) as coefficients is provided as ${Y(\chi)} = {{\sum\limits_{i = 0}^{n - 1}{b_{i}\chi^{i}}} = {{W(\chi)} + {E(\chi)}}}$

[0148] where Y(x) is defined as a reception polynomial.

[0149] Then, the reception polynomial Y(x) is employed to calculate the following syndromes:

S _(i) =Y(a ^(i))εGF(2^(m)), i=0, 1, . . ., 2t−1.

[0150] In this case, since W(a^(i))=0, i=0, 1, . . ., 2t−1 is established, and the obtained syndromes satisfy S_(i)=E(a^(i)), i=0, 1, . . . , 2t−1. Therefore, when there is no error, all the syndromes are 0, so that the value of syndromes can be used to determine the presence of errors.

[0151] 3. Determination of the Number of Errors and the Location of Errors

[0152] Assume that the number of errors that occur is 1 and that the location of the error is i₀, . . . , i_(l−1), i.e., assume that the values of b_(l) ₀ , . . ., b_(i) _(l−1) are incorrect. In order to determine the number of errors 1 and the error locations represented by i₀, . . . , i_(l−1) the following polynomial, having a^(−l) ^(₀) , . . . , a^(−i) ^(_(l−1)) as roots, is defined: ${\Lambda^{(l)}(\chi)} = {{\prod\limits_{k = 0}^{l - 1}\quad \left( {1 - {a^{i_{k}}\chi}} \right)} = {1 + {\Lambda_{1}^{(l)}\chi} + \ldots + {\Lambda_{l - 1}^{(l)}\chi^{l - 1}} + {\Lambda_{l}^{(l)}\chi^{l}}}}$

[0153] where a^(−l) ^(₀) , . . . , a^(−l) ^(_(l−1)) are called error locators and Λ^((l))(x) is called an error locator polynomial.

[0154] Further, Λ₁ ^((l)), . . . , Λ_(l) ^((l)) are coefficients of the error locator polynomial and are provided using the elementary symmetric function of a^(i) ^(₀) , . . . , a^(i) ^(_(1−l)) .

[0155] The unknown quantities Λ₁ ^((l)), . . . , Λ_(l) ^((l)) satisfy the following simultaneous linear equations: ${\begin{pmatrix} S_{0} & S_{1} & \cdots & S_{l - 1} \\ S_{1} & S_{2} & \cdots & S_{l} \\ \vdots & \quad & ⋰ & \vdots \\ S_{l - 1} & S_{l} & \cdots & S_{{2l} - 2} \end{pmatrix}\begin{pmatrix} \Lambda_{l}^{(l)} \\ \vdots \\ \vdots \\ \Lambda_{1}^{(l)} \end{pmatrix}} = \begin{pmatrix} S_{l} \\ \vdots \\ \vdots \\ S_{{2l} - 1} \end{pmatrix}$

[0156] This is nothing but the Yule-Walker equation explained in section A. While at this step “1” is an unknown number, it is known that when the number of errors that actually occurred is 1≦e≦t, the Hankel matrix on the left is regular when l=e and is irregular when t≧l>e. Therefore, for l=1, . . . , t, only the determinants for the Hankel matrix on the left need be calculated, and a maximum integer that is not 0 can be defined as the number of errors e. When the above equation is solved with l=e, the error locator polynomial can be obtained.

[0157] In this invention, to specify error locations, the error locators, i.e., the roots of error locator polynomial Λ^((e))(x)=0, need be calculated. For this calculation, a method can be employed whereby a^(−i), i=0, 1, . . . , n−1, is substituted in to determine whether the result is the zero point of the error locator polynomial. This method is called the Chien search method. When the zero point of the error locator polynomial is denoted as a^(−i) ^(₀) , . . . , a^(−i) ^(_(e−1)) , i₀, . . . , i_(e−1) provide the actual error locations.

[0158] 4. Calculation of Error Values

[0159] Error values can be obtained by solving the following Vandermonde simultaneous linear equations: ${\begin{pmatrix} 1 & 1 & \ldots & 1 \\ a^{i_{0}} & a^{i_{1}} & \ldots & a^{i_{e - 1}} \\ \vdots & \vdots & ⋰ & \vdots \\ a^{i_{0}{({e - 1})}} & a^{i_{1}{({e - 1})}} & \ldots & a^{i_{e - 1}{({e - 1})}} \end{pmatrix}\begin{pmatrix} E_{i_{0}} \\ \vdots \\ \vdots \\ E_{i_{e - 1}} \end{pmatrix}} = {\begin{pmatrix} S_{0} \\ \vdots \\ \vdots \\ S_{e - 1} \end{pmatrix}.}$

[0160] In this case, polynomial S(x), having a syndrome as a coefficient, is defined as

S(x)=S ₀ +S ₁ x+S _(2t−1) x ^(2t−1),

and

Ω(x)=Λ^((e))(x)S(x)mod x ^(2t−1)

[0161] is defined, wherein Ω(x) is called an error evaluator polynomial. In this case, the solution for the Vandermonde simultaneous linear equation can be obtained by calculating ${E_{i_{k}} = \frac{\Omega \left( a^{- i_{k}} \right)}{\Lambda^{i}\left( a^{- i_{k}} \right)}},{i = 0},\ldots \quad,{e - 1}$

[0162] This is called the Forney algorithm. When the error locations and the error values are obtained, only these need be subtracted from an input digital signal, so that a digital signal for which errors were corrected can be output.

[0163] D. Algorithm to Solve Yule-Walker Equation of this Invention

[0164] The object of the present inventors is to find an efficient algorithm that employs the combinational circuit to obtain the solution for the following Yule-Walker equation, defined over GF(2^(m)): ${\begin{pmatrix} S_{0} & \ldots & S_{l - 1} \\ \vdots & ⋰ & \vdots \\ S_{l - 1} & \ldots & S_{{2l} - 2} \end{pmatrix}\begin{pmatrix} \Lambda_{1}^{(l)} \\ \vdots \\ \Lambda_{1}^{(l)} \end{pmatrix}} = {\begin{pmatrix} S_{1} \\ \vdots \\ S_{{2l} - 1} \end{pmatrix}.}$

[0165] where S₀, S₁, . . . , S_(2t−1) are the elements of a given GF(2^(m)), and Λ_(i) ⁽¹⁾ are unknown amounts.

[0166] In this invention, by the Cramer formula the solution for the Yule-Walker equation is represented as the determinant form shown in FIG. 15, and a recursive structure is employed to obtain an efficient method for calculating determinants.

[0167] In order to calculate determinants in FIG. 15, the focus in the invention is on the following Jacobi's formula.

Jacobi's Formula

[0168] A=(a_(ij)) is defined as an order n square matrix on a commutative ring having a unit element of 1, and the cofactor (i, j) of A is defined as Λ_(ij). When Λ_(μν) ^((r)) is defined as the cofactor of minor A_(μν) ^((r)), with a set of subscripts,

μ={i ₁ , . . . , i _(r), (i ₁ < . . . <i _(r))}, ν={j ₁ , . . . , j _(r), (j ₁ < . . . <j _(r))},

[0169] the following equation is established. $\left| \begin{matrix} \Delta_{i_{1}j_{1}} & \ldots & \Delta_{i_{1}j_{r}} \\ \vdots & ⋰ & \vdots \\ \Delta_{i_{r}j_{1}} & \ldots & \Delta_{i_{r}j_{r}} \end{matrix} \right| = {\left( {d\quad e\quad t\quad A} \right)^{r - 1}{\Delta_{\mu \quad v}^{({n - r})}.}}$

[0170] In this invention, the following equation

Δ_(i) ₁ _(j) _(l) ·Δ_(l) ₂ _(j) ₁ −Δ_(l) ₂ _(j) ₁ ·Δ_(l) ₁ _(j) ₂ =(det A)Δ_(μν) ^((n−2))

[0171] can be employed, which holds when

μ={i ₁ , i ₂ }, ν={j ₁ , j ₂}.

[0172] The calculation of Λ_(i) ^(hat(l)) will now be described using Jacobi's formula.

[0173] First, Λ_(i) ^(hat(l+1)) is represented in the following form. ${\overset{\sim}{\Lambda}}_{0}^{({l + 1})} = \left| \begin{matrix} S_{0} & S_{1} & \ldots & S_{l - 1} & S_{l} \\ S_{1} & ⋰ & \quad & \vdots & S_{l + 1} \\ \vdots & \quad & ⋰ & \vdots & \vdots \\ S_{l - 1} & \ldots & \ldots & S_{{2l} - 2} & S_{{2l} - 1} \\ S_{l} & S_{l + 1} & \ldots & S_{{2l} - 1} & S_{2l} \end{matrix} \right|$

[0174] By careful examination of this determinant, Λ_(l) ^(hat(l)) is obtained by removing the (l+1−i)th row and the l-th column from Λ_(i) ^(hat(l+1)), and Λ₀ ^(hat(l)) is obtained by removing the l-th row and the l-th column. That is, since Λ₀ ^(hat(l)) and Λ₀ ^(hat(1)) are (l+1, l+1) and (l+1, l+1−i) cofactors of Λ₀ ^((l+1)) respectively,

Δ_(l+1, l+1)={tilde over (Λ)}₀ ^((l)), Δ_(l+1, l=1−i)=Δ_(l +1−i, l+1)={tilde over (Λ)}_(i) ^((l)),

[0175] while i₁=j₁=l+1i, i₂=j₂=l+1 is set in Jacobi's formula. Further, the (l+1−i, l+1−i) cofactor of Λ₀ ^(hat(l+1)) is defined as Γ_(l) ^((l+1)), the structure of which is shown in FIG. 16. And by Jacobi's formula, the following equation is obtained:

Γ_(i) ^((l+1)){tilde over (Λ)}₀ ^((l))+({tilde over (Λ)}₀ ^((l)) ²={tilde over (Λ)}₀ ^((l+1))Γ_(i−1) ^((l)) , i=1, . . . , l.

[0176] When Jacobi's formula is employed, the calculation of Λ_(i) ^(hat(l)) results in the calculation of Γ_(i) ^(hat(l)), which is the determinants of symmetric matrices. It should be noted, however, that, to obtain Λ_(l) ^(hat(l)), not only the calculation of Γ_(i) ^((l+1)) but also the 2×l multiplications and the calculation of l square roots are required. Since the calculations for the square root and the square calculations can be performed as linear calculations for GF(2^(m)), these calculations can be implemented as a circuit substantially at the similar cost as that of an addition. Therefore, only a very small cost is required, compared with a multiplier that is a non-liner operating circuit. Therefore, the present inventors focused on only the multipliers, and discussed the number of them that would be required. Since the characteristic of the GF(2^(m)) is always 2 and all Γ_(i) ^((l)) are symmetrical, the algorithm proposed here always cancels terms that are generated from arrangements that are asymmetrical to the diagonal line in the process for expanding the cofactor of determinants. For example, when the cofactor expansion is calculated for a 3×3symmetric matrix, the following equation is obtained $\left| \begin{matrix} a & b & c \\ b & d & e \\ c & e & f \end{matrix} \right| = {{{adf} + {ae}^{2} + {b^{2}f} + {bec} + {c^{2}d} + {bec}} = {{adf} + {ae}^{2} + {b^{2}f} + {c^{2}d}}}$

[0177] Since the term “bec”, which is generated from the arrangement asymmetrical to the diagonal line, always appears twice, this term is canceled. Thus, when the algorithm of the invention is used for a combinational circuit including multipliers, the required number of multipliers can be reduced.

[0178] The general form of the algorithm for the recursive calculation of , Γ_(l) ^((l)), l=1, 2, . . . , t+1, i=0, 1, . . . , t, is provided as follows.

[0179] 9. Γ_(l) ⁽¹⁾=1, Γ₀ ⁽²⁾ =S ₀, Γ₁ ⁽²⁾ =S ₂

[0180] 1. when l>2, i=1, . . . , l−1,

[0181] $\Gamma_{0}^{(l)} = {{S_{{2l} - 4}\Gamma_{0}^{({l - 1})}} + {\sum\limits_{k = 1}^{l - 2}{S_{{2l} - 4 - k}^{2}{\Gamma_{k - 1}^{({l - 2})}.}}}}$

[0182] 2. when l>2, i=1, . . . , l−1, first, one auxiliary amount for describing the algorithm is defined.

[0183] When {i_(l), . . . , i_(n)} is defined as a set of subscripts, det [{i₁,. . . , i_(n)}] is defined as ${d\quad e\quad {t\left\lbrack \left\{ {i_{1},\ldots \quad,i_{n}} \right\} \right\rbrack}} = \left| \begin{matrix} S_{i_{1}} & S_{i_{2}} & \ldots & S_{i_{n}} \\ S_{i_{2}} & S_{{2i_{2}} - i_{1}} & \ldots & S_{i_{2} + i_{n} - i_{1}} \\ \vdots & \vdots & ⋰ & \vdots \\ S_{i_{n}} & S_{i_{2} + i_{n} - i_{1}} & \ldots & S_{{2i_{n}} - i_{1}} \end{matrix} \right|$

[0184] Specifically, det [{i₁, . . . , i_(n)}] is the determinant of a symmetric matrix wherein the first row is S_(i) ₁ , . . . , S_(i) _(n) and the (p, q) element is S_(i) _(p) _(+l) _(q) _(−i) _(l) . This determinant is obtained by symmetrically removing several rows and columns from the Hankel determinant Λ₀ ^((l)). And Γ_(i) ^((l)) is calculated by using det [{i₁, . . . , i_(n)}] as follows. $\Gamma_{i}^{(l)} = {{S_{{2l} - 2}\Gamma_{i - 1}^{({l - 1})}} + {\sum\limits_{{k = 1},{k \neq i}}^{l - 1}{S_{{2l} - 2 - k}^{2}d\quad e\quad {{t\left\lbrack {\left\{ {0,1,\ldots \quad,{l - 2}} \right\} - \left\{ {{l - 1 - i},{l - 1 - k}} \right\}} \right\rbrack}.}}}}$

[0185] In this equation, det [{0, 1, . . . , l−2}−{l−1-i, l-1-k}] is the determinant for a symmetric matrix that is obtained by symmetrically removing, from Γ_(i) ^((l−1)), l−1−i and l−1−k rows and l−1−i and l−1−k columns. Note that, when k=1 and i=1, the determinant matches expression of Γ_(l−2) ^((l−2)), Γ_(k−2) ^((l−2)).

[0186] 3. Generally, det[{i ₁ , . . . i _(n)}] is calculated as follows. ${d\quad e\quad {t\left\lbrack \left\{ {i_{1},\ldots \quad,i_{n}} \right\} \right\rbrack}} = {{S_{{2i_{n}} - i_{i}}d\quad e\quad {t\left\lbrack \left\{ {i_{1},\ldots \quad,i_{n - 1}} \right\} \right\rbrack}} + {\sum\limits_{k = 1}^{n - 1}{S_{i_{n} - i_{1} + i_{k}}^{2}d\quad e\quad {{t\left\lbrack {\left\{ {i_{1},\ldots \quad,i_{n - 1}} \right\} - \left\{ i_{k} \right\}} \right\rbrack}.}}}}$

[0187] E. Application of the Algorithm of the Invention for the Decoding of the Reed-Solomon Code

[0188] An explanation will now be given for the embodiment wherein the algorithm of the invention for solving the Yule-Walker equation described in D is applied for the Reed-Solomon codes. Generally, it is assumed that the order of the Yule-Walker equation (the number of unknown quantities) is known. However, for the decoding of the Reed-Solomon codes, since the order is also unknown, this must also be determined.

[0189] 1 Calculation of Γ_(l) ^((l))

[0190] When a sequence of syndromes, S₀, S₁, . . . , S_(2t−1), is provided,

Γ_(i) ^((l)) , l=1, 2, . . . , t+1, i=0, . . . , t

[0191] is calculated in accordance with the algorithm explained in

[0192] D. During this Calculation,

{tilde over (Λ)}₀ ^((l))=Γ₀ ^((i+1)) , l=1, . . . , t

[0193] is also calculated. It should be noted that for fast decoding of the Reed-Solomon code, the present inventors have taken into consideration the fact that the algorithm is implemented as a combinational circuit. However, use of the error correction algorithm of the invention is not limited to the combinational circuit; it can be employed as an error correction device by a sequential circuit.

[0194] 2 Determination of the Number of Errors

[0195] Assume that the number of errors that actually occurred is represented as e. Based on the value of

{tilde over (Λ)}₀ ^((l))=Γ₀ ^((l+1)) , l=1, . . . , t,

[0196] e can be obtained as the maximum “l” that satisfies Λ₀ ^(hat(l))≠0.

[0197] 3 Determination of an Error Locator Polynomial

[0198] When e<t is established as the result of the determination of the number of errors, since Λ₀ ^(hat(e+1)) 32 0, in accordance with the algorithm of the invention, the above equation can be simplified as follows:

{tilde over (Λ)}_(i) ^((e))={square root}{square root over (Γ_(i) ^((e+1)){tilde over (Λ₀ ^((e)))})}, i=1, . . . , e.

[0199] Since the error locator is the zero point of the error locator polynomial, the error locators are values unchanged by multiplication of the coefficients of the error locator polynomial by a constant. Therefore, the following quantity

{square root}{square root over (Γ_(i) ^((e+1)))}

[0200] can be used instead of Λ_(i) ^(hat(e)). In other words, the multiplication appearing in the above equation is not required. When e=t is established, the error locator polynomial is calculated in accordance with the following equation:

{tilde over (Λ)}_(i) ^((e))={square root}{square root over (Γ_(i) ^((e+1)){tilde over (Γ₀ ^((e))+{tilde over (Γ₀ ^((e+1))Λ_(i−1) ^((e)))})})}, i=1, . . . , e.

[0201] At this time, according to the algorithm proposed by the present inventors, in appearance, syndrome S_(2t), which can not be calculated, seems to be necessary when the minimum distance is an odd number (=2t+1). However, since the equation of this invention serves as the identity of the syndromes, it can also serve as the identify of the syndrome S_(2t). Furthermore, since Λ_(i) ^(hat(t)) does not include syndrome S_(2t), when syndrome S_(2t) appears during the cofactor expansion for Λ₀ ^(hat(t+1)) and Γ_(l) ^((t+1)), it should always be canceled. Specifically, since a term that includes S_(2t) and that appears during the cofactor expansion of Γ_(i) ^((t+1)) is Γ_(i-l) ^((t))S_(2t), when Γ_(l) ^((t+1))Λ₀ ^(hat(t)) is expanded, a term including S_(2t) is Λ₀ ^(hat(t))Λ_(i-1) ^((t))S_(2t). Further, since, of the terms that appear during the cofactor expansion of Λ₀ ^(hat(t+1)), Λ₀ ^(hat(t))S_(2t) includes S_(2t), a term including S_(2t) when Λ₀ ^((t+1))Γ_(i-1) ^((t)) is expanded is Λ₀ ^(hat(t))Γ_(i-1) ^((t))S_(2t) . Therefore, all these terms must always be canceled.

[0202] It is therefore understood that, of the terms that appear during the cofactor expansion of Λ₀ ^((t+1)) and Γ_(i) ^((t+1)), terms having S_(2t) as a coefficient need not be calculated. In this manner, the algorithm of the invention can be applied for Reed-Solomon codes having an arbitrary minimum distance. Further, since the multiplication of the term including S_(2t) is not necessary, from the viewpoint of the reduction in the number of multipliers, the algorithm of the invention is superior to the Koga algorithm. In addition, as is described above, the calculation of a square root can be implemented as a circuit at the same cost as that for addition, and only a small cost is required compared with the cost of a multiplier.

[0203] F. Example of Application of the Error Correction Algorithm of the Invention for the Decoding of Reed-Solomon Codes

[0204] An explanation will now be given for a case wherein the error correction algorithm explained in E. is employed for the decoding of Reed-Solomon code for t=4. When t=4, according to the invention the following equations are determined. It should be noted that for simplification the determinant is represented as det [{i₁, . . ., i_(n)}]=deti₁. . . i_(n).

[0205] (1) Calculation of Γ_(i) ^((l)), i=0, . . . , l−1, . . . , 5

[0206] The calculation results obtained by the invention are shown in FIG. 17.

[0207] (2) Determination of the Number of Errors

[0208] Since Λ₀ ^((l))=Γ₀ ^((l+1)), l=1, . . . , 4 is determined by Γ_(i) ^((l)), obtained in (1), and the number of errors e can be determined as the maximum 1, l=1, 2, 3, 4, that satisfies

{tilde over (Λ)}₀ ^((l))≠0.

[0209] (3) Determination of an Error Locator Polynomial

[0210] When, for example, e=2 is ascertained using the calculation in (2), the error locator a^(i) ^(₀) , a^(i) ^(_(l)) can be obtained by solving the following algebraic equation:

{square root}{square root over ({tilde over (Λ)})}₀ ⁽²⁾+{square root}{square root over (Γ₁ ⁽³⁾)}χ²=0

[0211] When e=4 is ascertained, as is described above, the error locator can be obtained by

{tilde over (Λ)}_(i) ⁽⁴⁾={square root}{square root over (Γ_(i) ⁽⁵⁾{tilde over (Λ₀ ⁽⁴⁾+{tilde over (Λ₀ ⁽⁵⁾Γ_(i-1) ⁽⁴⁾)})})}, i=1, 2, 3, 4

[0212] It should be noted that, as is described above, the term including the syndrome S₈ need not be calculated when the Γ_(i) ⁽⁵⁾, Γ₀ ⁽⁶⁾={tilde over (Λ)}₀ ⁽⁵⁾ calculations are performed.

[0213]FIG. 18 is a schematic flowchart for the error correction algorithm of the invention. In the error correction algorithm of the invention, first, at step 200 syndromes S₀, . . . , S_(2t−1) are input, and at step 201 an error locator polynomial Γ is calculated. When Γ₀ ⁽²⁾, . . . , Γ₀ ^((t+1)) are obtained, at step 202 the number of errors is determined to be the maximum integer m that satisfies Λ₀ ^(hat(m))=Γ₀ ^((m+1))≠0. Then, at step 203, a check is performed to determine whether the number of errors e is equal to the maximum number of errors, and when e=t (yes), at step 204 an error value is calculated using Γ₀ ^((e+1))=Λ₀ ^(hat(e)), . . . , Γ_(e) ^((e+1)), Γ₀ ^((e+2))=Λ₀ ^(hat(e+1)). Whereas when e≠t (no), at step 205 an error value is calculated by only Γ₀ ^((e+1))=Λ₀ ^(hat(e)), . . . , Γ_(e) ^((e+1)), and at step 206, Λ₀ ^(hat(e)), . . . , Λ_(e) ^(hat(e)) is obtained.

[0214] G. Calculation Circuit when the Algorithm of the Invention is Applied for the Calculation of an Error Locator Polynomial

[0215]FIG. 19 is a block diagram showing a circuit for calculating an error locator polynomial based on the algorithm proposed by the invention. FIG. 20 is a diagram showing a circuit for calculating an error locator polynomial by the algorithm of the invention. This circuit comprises a {Γ_(i) ^((m))} calculation block 100, a circuit block 102 for calculating the number of errors and a circuit block 104 for determining an error locator polynomial.

[0216] The functions of the blocks in FIG. 19 will now be described. A series of syndromes that a sequential circuit has obtained using the input digital signal are transmitted to the circuit block 100. In the circuit block 100, these syndromes yield Γ_(i) ^((m)), m=1, 2, . . . , t+1, i=0, . . . , t, in accordance with the algorithm of the invention. This corresponds to (1) for the detailed explanation of the algorithm.

[0217] Following this, the circuit block 102 employs the obtained value Γ₀ ^((m)), m=1, 2, . . . , t+1 to calculate the number of errors e, and outputs Γ_(i) ^((e+1)), i=0, . . . , e, which corresponds to the value of e. When e=t, in addition to the above, Γ₀ ^((t+2))={tilde over (Λ)}₀ ^((t+1)) is also output. This corresponds to detailed explanation (2) for the algorithm. The circuit block 104 then employs Γ_(i) ^((e+1)), i=0, . . . , e to calculate the coefficients of the error locator polynomial. This calculation is performed in accordance with the process corresponding to detailed explanation (3) for the algorithm.

[0218] The algorithm of the invention has been used for the combinational circuit in order to perform fast decoding of the Reed-Solomon codes. However, the algorithm of the invention can also be used for a sequential circuit in order to reduce the circuit size.

[0219] H. Circuit Size when the Algorithm of the Invention is used for the Decoding of the Reed-Solomon Codes

[0220] An explanation will now be given for the size of a circuit when the algorithm of the present invention is used for the decoding of the Reed-Solomon codes. As is described above, the calculation of square roots and the calculation of squares can be performed by a circuit having substantially the same cost as an addition circuit, and compared with a multiplier, the cost required is very small. The present inventors have focused only on the multipliers, and discussed the number of multipliers that are required.

[0221] Table 4 shows the number of multipliers required by the algorithm of the invention in a range extending from t=1 to t=8. In Table 4, for comparison, the number of multipliers required for each of the conventional examples 1 and 2 is also shown. TABLE 4 Comparison of the number of multipliers Maximum 1 2 3 4  5  6  7   8 number of correctable errors t Algorithm for 0 3 17 48  117*  255*  548*  1111* conventional example 1 Algorithm for 2 9 22 49  98 189 351  640 conventional example 2 Algorithm of 2 7 21 46  94 179 331  597 the invention

[0222] As is apparent from Table 4, while taking the required number of multipliers into account, the algorithm proposed in this invention is superior in all number of errors t to the algorithm (conventional example 2) proposed by Koga. Further, the use of an algorithm for the decoding of (255, 239) Reed-Solomon code (t=8) is especially important for the optical communication field; however, the Koga algorithm can not be so employed because the minimum distance of Reed-Solomon code is an odd number (=17). Since the algorithm of the invention can be used for Reed-Solomon codes having an arbitrary minimum distance, it can also be used for (255, 239) Reed-Solomon code. This is shown in Table 5. TABLE 5 Comparison of the application ranges of the Koga algorithm and the algorithm of the invention Minimum . . . 15 16 17 18 . . . distance of code Koga . . . x ∘ x ∘ . . . algorithm Proposed . . . ∘ ∘ ∘ ∘ . . . algorithm

[0223] The calculation algorithm in conventional example 1 (Katayama-Morioka) can also be used for Reed-Solomon code having an arbitrary minimum distance. However, from the viewpoint of the required number of multipliers into account, when t is equal to or greater than 4, the algorithm proposed in this invention requires a smaller number of multipliers than does the algorithm of conventional example 1. It has especially been found that when t=8, the algorithm of the invention can reduce the number of multipliers by about 50%. And as for a circuit size, when t=8, 10K gates are currently required for the calculation of the error values. For conventional example 1 about 80K gates seem to be required, while the employment of the algorithm of the invention can reduce the gates for the calculation of an error polynomial to about 40K gates.

[0224]FIG. 20 is a schematic diagram showing an error correction device according to the invention. The error correction device in FIG. 20 comprises: an encoding block 110, for receiving and encoding a digital signal; an input block 112, for receiving the encoded digital signal ID and for calculating syndromes; a process block 114, including a decoding circuit; and an output block 116, for correcting an error using an error location and an error value that are output and for outputting the resultant digital signal OD. The encoding block 110 receives the digital signal, which is transmitted by interleaved wavelength division multiplexing, converts the signal into Reed-Solomon codes, for example, and transmits the encoded digital signal to the input block 112. The input block 112 employs a sequential circuit to calculate syndromes for the received digital signal, and transmits the syndromes to the process block 114.

[0225] The process block 114 includes a decoding function employing the algorithm of the invention, and calculates error locations and error values. The error locations and the error values that are obtained are transmitted to the output block 116, the error is corrected, and the resultant digital signal is output. The above described error correction circuit can be provided as an error correction device comprising multiple hardware components, or a semiconductor technique may be employed to provide a semiconductor device, such as an ASIC, for which the individual functional blocks of the error correction circuit are implemented on a silicon wafer. In addition, the algorithm of the invention can be mounted as firmware for the error correction device, or may be provided as a computer-readable program that is recorded on a storage medium, such as a floppy disk, a hard disk, an optical disk or a magneto-optical disk. The program of the invention may be written in an arbitrary object-oriented language or a programming language such as C, and stored on the above mentioned storage medium.

[0226] As is described above, according to the present invention, it is possible to provide a combinational circuit that can extremely efficiently correct errors in the fast optical communication field, and an encoder, a decoder and a semiconductor device that employ this combinational circuit. Description of the Symbols 10: Input unit 12: Processor 14: Output unit 16: Syndrome calculator 18: Error locator polynominal calculator 18a: Register 20: Error value polynominal calculator 22: Register 24: AND gate 26: XOR gate 28a, 28B: imn buffer 40, 42: Multiplier 45a, 45b, 62, 64: Output 46: Multipliers 47: Adder group 52, 54, 56, 60a, 60b: XOR group 60: Downstream XOR group 66, 68, 70, 72, 77, 78: Input 80, 82: AND group 84: Additions circuit 

What is claimed is:
 1. A combinational circuit comprising: a plurality of multipliers, independently performing two or more multiplications for coded digital signals in a Galois extension field GF(2^(m)), where m is an integer equal to or greater than 2, wherein said multipliers include an input side XOR calculator, an AND calculator, and an output side XOR calculator, and wherein said multipliers share said input side XOR calculator.
 2. The combinational circuit according to claim 1, wherein the input of said multipliers is commonly used.
 3. The combinational circuit according to claim 1, that is used for: an error location calculator that calculates an error location for a digital signal transmitted using wavelength division multiplexing, and for an error value calculator.
 4. The combinational circuit according to claim 1, wherein syndromes obtained by said coded digital signal are input.
 5. The combinational circuit according to claim 1, that is used for at least one of decoding, error correction and encryption.
 6. The combinational circuit according to claim 1, that is used for a coding circuit and a decoding circuit for cryptography.
 7. A combinational circuit for performing a logical sum calculation for a Galois extension field GF(2^(m)), where m is an integer equal to or greater than 2, comprising: a plurality of multipliers, each of which includes an adder connected between an AND calculator and an output side XOR calculator, wherein said output side XOR calculator is used in common, and wherein outputs of said AND calculators in said multipliers are added by said adders, and addition results are calculated by said output side XOR calculator that is used in common.
 8. The combinational circuit according to claim 7, wherein said multipliers have an input that is commonly used, and said input side XOR calculator is used in common by said multipliers.
 9. The combinational circuit according to claim 7, that is used for: an error location calculator for calculating an error location for a digital signal transmitted using wavelength division multiplexing, and an error value calculator.
 10. The combinational circuit according to claim 7, wherein syndromes obtained by said coded digital signal are input.
 11. The combinational circuit according to claim 7, that is used for at least one of decoding, error correction and encryption.
 12. The combinational circuit according to claim 7 that is used for a coding circuit and a decoding circuit for cryptography.
 13. An encoder including the combinational circuit according to claim 1 or claim
 7. 14. A decoder including the combinational circuit according to claim 1 or claim
 7. 15. A semiconductor device used for processing a digital signal, said device comprising: input means, for receiving a coded digital signal; processing means, for processing said coded digital signal and for calculating coefficients of error locator polynomial and coefficients of error value polynomial; and output means, for outputting a digital signal obtained by correcting errors using said coefficients of error locator polynomial and said coefficients of error value polynomial, wherein said input means is constituted by a sequential circuit, and said processing means is constituted by a combinational circuit.
 16. The semiconductor device according to claim 15, wherein said combinational circuit includes: a plurality of multipliers, independently performing two or more multiplications for coded digital signals in a Galois extension field GF(2^(m)), where m is an integer equal to or greater than 2, wherein said multipliers include an input side XOR calculator, an AND calculator, and an output side XOR calculator, and wherein said multipliers share said input side XOR calculator.
 17. The semiconductor device according to claim 15, wherein said combinational circuit includes: a logical sum calculator for a Galois extension field GF(2^(m)), where m is an integer equal to or greater than 2, wherein said multipliers include an adder connected between said AND calculator and said output side XOR calculator, wherein said output side XOR calculator is used in common, and wherein outputs of said AND calculators in said multipliers are added by said adders, and addition results are calculated by said output side XOR calculator that is used in common.
 18. The semiconductor device according to claim 15, wherein said multipliers have commonly used input, and said input side XOR calculator is used in common by said multipliers.
 19. The semiconductor device according to claim 15, wherein said combinational circuit is used for an error location calculator, for calculating an error location for a digital signal transmitted using wavelength division multiplexing, and for an error value calculator.
 20. The semiconductor device according to claim 15 that is used for at least one of decoding, error correction and encryption. 